subconscious-cli 6.0.0 → 6.1.0

package/bin/auth.js

@@ -12,16 +12,23 @@
  */
 
 import { exec } from 'node:child_process';
-import { openWindowsBrowser } from './windows/process.js';
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { c } from './colors.js';
-import { clearProfileApiKey, DEFAULT_PROFILE, ensureProfile } from './profiles.js';
+import {
+  clearProfileApiKey,
+  DEFAULT_PROFILE,
+  ensureProfile,
+} from './profiles.js';
 import { printLoginUpgradeWarning } from './upgrade.js';
+import { openWindowsBrowser } from './windows/process.js';
 
 function configDir() {
-  return process.env.SUBC_CONFIG_DIR?.trim() || path.join(os.homedir(), '.subconscious');
+  return (
+    process.env.SUBC_CONFIG_DIR?.trim() ||
+    path.join(os.homedir(), '.subconscious')
+  );
 }
 
 function configFile() {
@@ -78,7 +85,10 @@ export async function getApiKey(profile) {
 
   const config = await loadConfig();
   if (config.subconscious_api_key) {
-    return { key: config.subconscious_api_key, source: '~/.subconscious/config.json' };
+    return {
+      key: config.subconscious_api_key,
+      source: '~/.subconscious/config.json',
+    };
   }
   return null;
 }
@@ -87,9 +97,11 @@ export async function getApiKey(profile) {
 
 function openBrowser(url) {
   if (process.platform === 'win32') {
-    void openWindowsBrowser(url).then(code => {
-      if (code) throw new Error('Browser could not be opened');
-    }).catch(() => console.log(`Please open this URL manually:\n\n  ${url}\n`));
+    void openWindowsBrowser(url)
+      .then((code) => {
+        if (code) throw new Error('Browser could not be opened');
+      })
+      .catch(() => console.log(`Please open this URL manually:\n\n  ${url}\n`));
     return;
   }
   const cmd =
@@ -131,7 +143,11 @@ export async function registerDeviceLogin(platformUrl, fetchImpl = fetch) {
   return data;
 }
 
-export async function pollDeviceLogin(platformUrl, deviceCode, fetchImpl = fetch) {
+export async function pollDeviceLogin(
+  platformUrl,
+  deviceCode,
+  fetchImpl = fetch,
+) {
   const res = await fetchImpl(`${platformUrl}/api/cli/device/token`, {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
@@ -151,7 +167,9 @@ function printDeviceInstructions(platformUrl, userCode) {
   console.log(`  ${c.dim}Opening browser to sign in...${c.reset}`);
   console.log();
   console.log(`  ${c.dim}If a window doesn't open, go to:${c.reset}`);
-  console.log(`  ${c.underline}${c.cyan}${terminalLink(verificationUrl)}${c.reset}`);
+  console.log(
+    `  ${c.underline}${c.cyan}${terminalLink(verificationUrl)}${c.reset}`,
+  );
   console.log();
   console.log(
     `  ${c.dim}Or open ${c.reset}${c.underline}${c.cyan}${terminalLink(deviceUrl)}${c.reset}${c.dim} and enter:${c.reset} ${c.bold}${userCode}${c.reset}`,
@@ -161,7 +179,9 @@ function printDeviceInstructions(platformUrl, userCode) {
 }
 
 function printLoginFallback() {
-  console.error(`  ${c.dim}You can also copy an API key from the dashboard and run${c.reset} ${c.cyan}subc update-key <your-api-key>${c.reset}${c.dim}.${c.reset}`);
+  console.error(
+    `  ${c.dim}You can also copy an API key from the dashboard and run${c.reset} ${c.cyan}subc update-key <your-api-key>${c.reset}${c.dim}.${c.reset}`,
+  );
 }
 
 async function saveLoginKey(profileName, token) {
@@ -181,17 +201,23 @@ export async function loginCommand(_argv = [], options = {}) {
   if (existing) {
     const profile = await ensureProfile(profileName, existing.key);
     const logout =
-      profileName === DEFAULT_PROFILE ? 'subc logout' : `subc --profile ${profileName} logout`;
-    const masked = existing.key.slice(0, 8) + '...' + existing.key.slice(-4);
+      profileName === DEFAULT_PROFILE
+        ? 'subc logout'
+        : `subc --profile ${profileName} logout`;
+    const masked = `${existing.key.slice(0, 8)}...${existing.key.slice(-4)}`;
     console.log(`\n${c.yellow}Already logged in.${c.reset}`);
     console.log(`  Key: ${c.dim}${masked}${c.reset}`);
     console.log(`  Profile: ${c.dim}${profile.path}${c.reset}`);
-    console.log(`\n  Run ${c.cyan}${logout}${c.reset} first to switch accounts.\n`);
+    console.log(
+      `\n  Run ${c.cyan}${logout}${c.reset} first to switch accounts.\n`,
+    );
     return;
   }
 
   console.log();
-  console.log(`  ${c.magenta}${c.bold}Subconscious${c.reset} ${c.dim}— CLI Login${c.reset}`);
+  console.log(
+    `  ${c.magenta}${c.bold}Subconscious${c.reset} ${c.dim}— CLI Login${c.reset}`,
+  );
   console.log();
 
   const platformUrl = getPlatformUrl(options.profile);
@@ -206,7 +232,10 @@ export async function loginCommand(_argv = [], options = {}) {
     return;
   }
 
-  const verificationUrl = printDeviceInstructions(platformUrl, registered.user_code);
+  const verificationUrl = printDeviceInstructions(
+    platformUrl,
+    registered.user_code,
+  );
   (options.openBrowser || openBrowser)(verificationUrl);
 
   const frames = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
@@ -229,35 +258,47 @@ export async function loginCommand(_argv = [], options = {}) {
       if (Date.now() - started > DEVICE_POLL_TIMEOUT_MS) {
         throw new Error('Authentication timed out (5 min). Please try again.');
       }
-      const polled = await pollDeviceLogin(platformUrl, registered.device_code, fetchImpl);
+      const polled = await pollDeviceLogin(
+        platformUrl,
+        registered.device_code,
+        fetchImpl,
+      );
       if (polled.status === 'approved') {
         clearInterval(spinner);
-        process.stdout.write('\r' + ' '.repeat(50) + '\r');
+        process.stdout.write(`\r${' '.repeat(50)}\r`);
         const profile = await saveLoginKey(profileName, polled.key);
-        const masked = polled.key.slice(0, 8) + '...' + polled.key.slice(-4);
+        const masked = `${polled.key.slice(0, 8)}...${polled.key.slice(-4)}`;
         console.log(`  ${c.green}${c.bold}✓ Logged in successfully!${c.reset}`);
         console.log(`  ${c.dim}Key: ${masked}${c.reset}`);
         if (profileName === DEFAULT_PROFILE) {
-          console.log(`  ${c.dim}Saved to ~/.subconscious/config.json${c.reset}`);
+          console.log(
+            `  ${c.dim}Saved to ~/.subconscious/config.json${c.reset}`,
+          );
         }
         console.log(`  ${c.dim}Runbook profile: ${profile.path}${c.reset}`);
-        console.log(`  ${c.dim}Launch a terminal agent with ${c.reset}${c.cyan}subc claude${c.reset}${c.dim}, or install editor hooks with ${c.reset}${c.cyan}subc cursor install${c.reset}${c.dim}.${c.reset}`);
-        console.log(`  ${c.dim}Pi needs ${c.reset}${c.cyan}subc pi install${c.reset}${c.dim} first. List profiles with ${c.reset}${c.cyan}subc config${c.reset}${c.dim}.${c.reset}`);
+        console.log(
+          `  ${c.dim}Launch a terminal agent with ${c.reset}${c.cyan}subc claude${c.reset}${c.dim}, or install editor hooks with ${c.reset}${c.cyan}subc cursor install${c.reset}${c.dim}.${c.reset}`,
+        );
+        console.log(
+          `  ${c.dim}Pi needs ${c.reset}${c.cyan}subc pi install${c.reset}${c.dim} first. List profiles with ${c.reset}${c.cyan}subc config${c.reset}${c.dim}.${c.reset}`,
+        );
         console.log();
         return;
       }
       if (polled.status === 'expired') {
         throw new Error('Login code expired. Please try again.');
       }
-      await new Promise((resolve) => setTimeout(resolve, DEVICE_POLL_INTERVAL_MS));
+      await new Promise((resolve) =>
+        setTimeout(resolve, DEVICE_POLL_INTERVAL_MS),
+      );
     }
     clearInterval(spinner);
-    process.stdout.write('\r' + ' '.repeat(50) + '\r');
+    process.stdout.write(`\r${' '.repeat(50)}\r`);
     console.log(`\n  ${c.dim}Login cancelled.${c.reset}\n`);
     process.exitCode = 1;
   } catch (error) {
     clearInterval(spinner);
-    process.stdout.write('\r' + ' '.repeat(50) + '\r');
+    process.stdout.write(`\r${' '.repeat(50)}\r`);
     console.error(`  ${c.red}✗ ${error.message}${c.reset}`);
     printLoginFallback();
     console.log();
@@ -282,7 +323,8 @@ export async function updateApiKeyCommand(argv = [], options = {}) {
     await saveConfig(config);
   }
 
-  const masked = key.length <= 12 ? '********' : `${key.slice(0, 8)}...${key.slice(-4)}`;
+  const masked =
+    key.length <= 12 ? '********' : `${key.slice(0, 8)}...${key.slice(-4)}`;
   console.log(`\n  ${c.green}${c.bold}✓ API key updated.${c.reset}`);
   console.log(`  ${c.dim}Profile: ${profile.path}${c.reset}`);
   console.log(`  ${c.dim}Key:     ${masked}${c.reset}`);
@@ -298,7 +340,8 @@ export async function logoutCommand(_argv = [], options = {}) {
   const profileName = options.profileName || DEFAULT_PROFILE;
   const config = await loadConfig();
   const clearedProfile = await clearProfileApiKey(profileName);
-  const clearSavedConfig = profileName === DEFAULT_PROFILE && config.subconscious_api_key;
+  const clearSavedConfig =
+    profileName === DEFAULT_PROFILE && config.subconscious_api_key;
 
   if (!clearSavedConfig && !clearedProfile) {
     console.log(`\n  ${c.dim}Not logged in.${c.reset}\n`);
@@ -331,16 +374,19 @@ export async function whoamiCommand(_argv = [], options = {}) {
   }
 
   const { key, source } = auth;
-  const masked = key.slice(0, 8) + '...' + key.slice(-4);
+  const masked = `${key.slice(0, 8)}...${key.slice(-4)}`;
 
   console.log();
 
   // Validate the key against the server; falls back to offline display if unreachable
   try {
-    const res = await fetch(`${getPlatformUrl(options.profile)}/api/cli/whoami`, {
-      headers: { Authorization: `Bearer ${key}` },
-      signal: AbortSignal.timeout(5000),
-    });
+    const res = await fetch(
+      `${getPlatformUrl(options.profile)}/api/cli/whoami`,
+      {
+        headers: { Authorization: `Bearer ${key}` },
+        signal: AbortSignal.timeout(5000),
+      },
+    );
 
     if (res.status === 404) {
       printLoginUpgradeWarning();
@@ -355,7 +401,7 @@ export async function whoamiCommand(_argv = [], options = {}) {
       }
       console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
       console.log(`  ${c.dim}Source: ${source}${c.reset}`);
-    } else {
+    } else if (res.status === 401) {
       console.log(`  ${c.red}✗ Key is invalid or revoked${c.reset}`);
       console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
       console.log(`  ${c.dim}Source: ${source}${c.reset}`);
@@ -363,9 +409,19 @@ export async function whoamiCommand(_argv = [], options = {}) {
       console.log(
         `  Run ${c.cyan}subc ${profileFlag}logout${c.reset} then ${c.cyan}subc ${profileFlag}login${c.reset} to re-authenticate.`,
       );
+    } else {
+      // Only a 401 means the key was rejected. A 5xx or 429 says nothing
+      // about the key, so don't tell the user to log out.
+      console.log(
+        `  ${c.yellow}Could not verify the key (platform returned HTTP ${res.status})${c.reset}`,
+      );
+      console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
+      console.log(`  ${c.dim}Source: ${source}${c.reset}`);
     }
   } catch {
-    console.log(`  ${c.green}✓ Authenticated${c.reset} ${c.dim}(offline — key not verified)${c.reset}`);
+    console.log(
+      `  ${c.green}✓ Authenticated${c.reset} ${c.dim}(offline — key not verified)${c.reset}`,
+    );
     console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
     console.log(`  ${c.dim}Source: ${source}${c.reset}`);
   }

package/bin/branding.js

@@ -28,6 +28,8 @@ export function renderBanner(options = {}) {
   // still get the same logo without ANSI styling.
   if (!isTTY || term === 'dumb') return `  ${title}`;
 
-  const logo = color ? `${BRAND_ORANGE}${LOGO_ART_SMALL}${RESET}` : LOGO_ART_SMALL;
+  const logo = color
+    ? `${BRAND_ORANGE}${LOGO_ART_SMALL}${RESET}`
+    : LOGO_ART_SMALL;
   return `${logo}\n\n  ${title}`;
 }

package/bin/claude-picker.js

@@ -0,0 +1,143 @@
+// The env claudeModelPickerEnv sets, described for readers that cannot run it.
+export const CLAUDE_PICKER_ENV_DESCRIPTION = [
+  ...['OPUS', 'SONNET', 'HAIKU', 'FABLE'].flatMap((role, index) => {
+    const alias = role.toLowerCase();
+    return [
+      {
+        name: `ANTHROPIC_DEFAULT_${role}_MODEL`,
+        value: `{catalog[${index}]}`,
+        override: [`ANTHROPIC_DEFAULT_${role}_MODEL`],
+        description: `Model behind the ${alias} alias. Set from the catalog, padded to four entries; a profile or environment value is kept only when it is in the live catalog.`,
+      },
+      {
+        name: `ANTHROPIC_DEFAULT_${role}_MODEL_NAME`,
+        value: `{catalog[${index}]}`,
+        override: [`ANTHROPIC_DEFAULT_${role}_MODEL_NAME`],
+        description: `Picker label for the ${alias} alias.`,
+      },
+      {
+        name: `ANTHROPIC_DEFAULT_${role}_MODEL_DESCRIPTION`,
+        value: `Subconscious model {catalog[${index}]}`,
+        override: [`ANTHROPIC_DEFAULT_${role}_MODEL_DESCRIPTION`],
+        description: `Picker description for the ${alias} alias.`,
+      },
+    ];
+  }),
+  {
+    name: 'ANTHROPIC_CUSTOM_MODEL_OPTION',
+    value: '{catalog[4]}',
+    description:
+      'Fifth picker entry, with _NAME and _DESCRIPTION. Only when the catalog has five or more models.',
+  },
+  {
+    name: 'SUBC_CLAUDE_SETTINGS',
+    value: '{claudeSettings}',
+    description: 'Picker settings JSON passed to --settings.',
+  },
+];
+
+const CLAUDE_MODEL_PICKER_KEYS = [
+  'ANTHROPIC_DEFAULT_OPUS_MODEL',
+  'ANTHROPIC_DEFAULT_OPUS_MODEL_NAME',
+  'ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION',
+  'ANTHROPIC_DEFAULT_SONNET_MODEL',
+  'ANTHROPIC_DEFAULT_SONNET_MODEL_NAME',
+  'ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION',
+  'ANTHROPIC_DEFAULT_HAIKU_MODEL',
+  'ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME',
+  'ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION',
+  'ANTHROPIC_DEFAULT_FABLE_MODEL',
+  'ANTHROPIC_DEFAULT_FABLE_MODEL_NAME',
+  'ANTHROPIC_DEFAULT_FABLE_MODEL_DESCRIPTION',
+  'ANTHROPIC_CUSTOM_MODEL_OPTION',
+  'ANTHROPIC_CUSTOM_MODEL_OPTION_NAME',
+  'ANTHROPIC_CUSTOM_MODEL_OPTION_DESCRIPTION',
+];
+
+const CLAUDE_MODEL_PICKER_ID_KEYS = [
+  'ANTHROPIC_DEFAULT_OPUS_MODEL',
+  'ANTHROPIC_DEFAULT_SONNET_MODEL',
+  'ANTHROPIC_DEFAULT_HAIKU_MODEL',
+  'ANTHROPIC_DEFAULT_FABLE_MODEL',
+  'ANTHROPIC_CUSTOM_MODEL_OPTION',
+];
+
+function uniqueCatalogModels(models, fallbackModel) {
+  const unique = [];
+  for (const model of models) {
+    if (model && !unique.includes(model)) unique.push(model);
+  }
+  if (unique.length === 0 && fallbackModel) unique.push(fallbackModel);
+  return unique;
+}
+
+export function claudePickerSettings(models, fallbackModel) {
+  const unique = uniqueCatalogModels(models, fallbackModel);
+  return {
+    availableModels: unique,
+    modelPicker: {
+      replaceBuiltInOptions: true,
+      options: unique.map((model) => ({
+        model,
+        label: model,
+        description: `Subconscious model ${model}`,
+      })),
+    },
+  };
+}
+
+export function claudeModelPickerEnv(model, models) {
+  // Only the live catalog belongs in Claude's picker. Packaged registry slots
+  // (Haiku → DeepSeek, etc.) must not be unioned back in — that advertised
+  // models the key cannot call.
+  //
+  // Pad through Fable so the built-in `fable` alias cannot resolve to Anthropic
+  // Fable 5. The /model menu itself is replaced via claudePickerSettings.
+  const pickerModels = uniqueCatalogModels(models, model);
+  while (pickerModels.length < 4)
+    pickerModels.push(pickerModels.at(-1) || model);
+
+  const roles = ['OPUS', 'SONNET', 'HAIKU', 'FABLE'];
+  const env = {};
+  for (let index = 0; index < roles.length; index++) {
+    const role = roles[index];
+    const model = pickerModels[index];
+    if (!model) continue;
+    env[`ANTHROPIC_DEFAULT_${role}_MODEL`] = model;
+    env[`ANTHROPIC_DEFAULT_${role}_MODEL_NAME`] = model;
+    env[`ANTHROPIC_DEFAULT_${role}_MODEL_DESCRIPTION`] =
+      `Subconscious model ${model}`;
+  }
+  const customModel = pickerModels[4];
+  if (customModel) {
+    env.ANTHROPIC_CUSTOM_MODEL_OPTION = customModel;
+    env.ANTHROPIC_CUSTOM_MODEL_OPTION_NAME = customModel;
+    env.ANTHROPIC_CUSTOM_MODEL_OPTION_DESCRIPTION = `Subconscious model ${customModel}`;
+  }
+  return Object.fromEntries(
+    CLAUDE_MODEL_PICKER_KEYS.map((key) => [key, env[key]]).filter(
+      ([, value]) => value,
+    ),
+  );
+}
+
+export function applyClaudePickerCatalog(env, picker, models) {
+  if (Object.keys(picker).length === 0) return env;
+  const allowed = new Set(models);
+
+  for (const key of CLAUDE_MODEL_PICKER_KEYS) {
+    if (!picker[key]) {
+      delete env[key];
+    }
+  }
+
+  for (const key of CLAUDE_MODEL_PICKER_ID_KEYS) {
+    if (!picker[key] || !env[key] || allowed.has(env[key])) continue;
+    env[key] = picker[key];
+    const nameKey = `${key}_NAME`;
+    const descriptionKey = `${key}_DESCRIPTION`;
+    if (picker[nameKey]) env[nameKey] = picker[nameKey];
+    if (picker[descriptionKey]) env[descriptionKey] = picker[descriptionKey];
+  }
+  return env;
+}

package/bin/cli.js

@@ -10,43 +10,49 @@
  */
 
 import fs from 'node:fs/promises';
-import { c } from './colors.js';
-import { renderBanner } from './branding.js';
 import {
+  agentCommandName,
+  agentList,
+  isAgentHelpRequest,
+  isHeadlessRequest,
+  parseAgentAction,
+  resolveAgent,
+  runAgent,
+} from './agents.js';
+import {
+  getApiKey,
   loginCommand,
   logoutCommand,
-  getApiKey,
   updateApiKeyCommand,
   whoamiCommand,
 } from './auth.js';
-import { upgradeCommand } from './upgrade.js';
+import { renderBanner } from './branding.js';
+import { c } from './colors.js';
+import { feedbackCommand, printFeedbackHelp } from './feedback.js';
 import {
-  resolveAgent,
-  runAgent,
-  agentList,
-  agentCommandName,
-  isAgentHelpRequest,
-  parseAgentAction,
-} from './agents.js';
+  harnessManifestCommand,
+  printHarnessManifestHelp,
+} from './harness-manifest.js';
+import { headlessPromptIndex } from './headless-args.js';
+import { resolveModelCatalog } from './models.js';
 import {
   configCommand,
   DEFAULT_PROFILE,
   loadProfile,
   modelsCommand,
+  SUPPORTED_MODELS as PACKAGED_MODELS,
   printConfigHelp,
-  resolvedModelSetting,
   RUNBOOK_DEFAULTS,
-  SUPPORTED_MODELS as PACKAGED_MODELS,
+  resolvedModelSetting,
   updatePlatformUrlCommand,
   updateUrlCommand,
   validateProfileName,
 } from './profiles.js';
-import { resolveModelCatalog } from './models.js';
-import { showUpdateNotice } from './update-check.js';
-import { runTui } from './tui.js';
 import { sessionsCommand } from './sessions.js';
+import { runTui } from './tui.js';
+import { showUpdateNotice } from './update-check.js';
+import { upgradeCommand } from './upgrade.js';
 import { printUsageHelp, usageCommand } from './usage.js';
-import { feedbackCommand, printFeedbackHelp } from './feedback.js';
 
 function isHelpArg(arg) {
   return arg === 'help' || arg === '-h' || arg === '--help';
@@ -54,7 +60,10 @@ function isHelpArg(arg) {
 
 function printHelp() {
   const agents = agentList()
-    .map(({ name, alias, action }) => `    ${c.cyan}${alias.padEnd(13)}${c.reset}${c.dim}${action} ${name}${c.reset}`)
+    .map(
+      ({ name, alias, action }) =>
+        `    ${c.cyan}${alias.padEnd(13)}${c.reset}${c.dim}${action} ${name}${c.reset}`,
+    )
     .join('\n');
 
   console.log(`${renderBanner()}
@@ -83,6 +92,7 @@ function printHelp() {
 
   ${c.bold}Coding agents${c.reset}
 ${agents}
+    ${c.cyan}harness-manifest${c.reset}  Print how each agent is installed and launched (JSON)
 
   ${c.bold}Options${c.reset}
     ${c.dim}--model <id>${c.reset}   Model to use (profile MODEL, or first live catalog model if UNSET)
@@ -108,6 +118,8 @@ ${agents}
     ${c.dim}$${c.reset} subc cursor install
     ${c.dim}$${c.reset} subc cursor uninstall
     ${c.dim}$${c.reset} subc pi install
+    ${c.dim}$${c.reset} subc harness-manifest --json
+    ${c.dim}$${c.reset} subc codex headless "fix the failing test"
     ${c.dim}$${c.reset} subc -p staging codex
 
   ${c.dim}Use subc <command> help for command-specific usage.${c.reset}
@@ -242,12 +254,45 @@ const authCommands = {
   whoami: whoamiCommand,
 };
 
+/**
+ * Position of the headless prompt in the full argv, or -1. It is decided on
+ * the words left once profile flags are removed, which is what the agent
+ * launcher sees, so both agree on whether the run is headless.
+ */
+function headlessPromptPosition(argv) {
+  const kept = [];
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    const afterCommand = kept.slice(1).map((index) => argv[index]);
+    if (
+      kept.length > 0 &&
+      headlessPromptIndex(afterCommand) === afterCommand.length
+    ) {
+      return i;
+    }
+    if (arg === '--') return -1;
+    if (arg === '--profile' || arg === '-p') {
+      i++;
+      continue;
+    }
+    if (arg.startsWith('--profile=')) continue;
+    kept.push(i);
+  }
+  return -1;
+}
+
 function extractProfile(argv) {
   let profileName = process.env.SUBC_PROFILE?.trim() || DEFAULT_PROFILE;
   let profileExplicit = false;
   const args = [];
+  // The headless prompt is opaque, even when it looks like --profile.
+  const promptIndex = headlessPromptPosition(argv);
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
+    if (i === promptIndex) {
+      args.push(arg);
+      continue;
+    }
     if (arg === '--') {
       args.push(...argv.slice(i));
       break;
@@ -293,15 +338,32 @@ async function main() {
     return;
   }
 
+  // Machine-readable output: skip the update check so nothing else reaches
+  // stdout and no npm request is made.
+  if (command === 'harness-manifest') {
+    if (isHelpArg(args[1])) {
+      printHarnessManifestHelp();
+      return;
+    }
+    harnessManifestCommand(args.slice(1));
+    return;
+  }
+
   const launchTui =
     !command &&
     process.stdin.isTTY === true &&
     process.stdout.isTTY === true &&
     process.env.TERM !== 'dumb';
 
+  // Headless runs are scripted: no npm request and no update prompt.
+  const headlessAgent = resolveAgent(command);
+  const headless = Boolean(
+    headlessAgent && isHeadlessRequest(headlessAgent, args.slice(1)),
+  );
+
   // Explicit commands can wait on npm. The TUI opens immediately and prompts
   // only after a newer version is found.
-  if (!launchTui) {
+  if (!launchTui && !headless) {
     const update = await showUpdateNotice();
     if (update?.action === 'updated' || update?.action === 'cancel') return;
   }
@@ -330,7 +392,12 @@ async function main() {
     }
   }
 
-  if (!command || command === '--help' || command === '-h' || (command === 'help' && !args[1])) {
+  if (
+    !command ||
+    command === '--help' ||
+    command === '-h' ||
+    (command === 'help' && !args[1])
+  ) {
     printHelp();
     return;
   }

package/bin/clipboard-image.js

@@ -8,13 +8,23 @@ import { promisify } from 'node:util';
 
 const execFileAsync = promisify(execFile);
 
-const PNG_SIGNATURE = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+const PNG_SIGNATURE = Buffer.from([
+  0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a,
+]);
 
 export function imageContentType(buffer) {
-  if (buffer.length >= 3 && buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {
+  if (
+    buffer.length >= 3 &&
+    buffer[0] === 0xff &&
+    buffer[1] === 0xd8 &&
+    buffer[2] === 0xff
+  ) {
     return 'image/jpeg';
   }
-  if (buffer.length >= PNG_SIGNATURE.length && buffer.subarray(0, PNG_SIGNATURE.length).equals(PNG_SIGNATURE)) {
+  if (
+    buffer.length >= PNG_SIGNATURE.length &&
+    buffer.subarray(0, PNG_SIGNATURE.length).equals(PNG_SIGNATURE)
+  ) {
     return 'image/png';
   }
   return null;
@@ -48,11 +58,16 @@ async function readDarwinClipboard() {
 async function readLinuxClipboard() {
   const commands = [
     ['wl-paste', ['--type', 'image/png']],
+    ['wl-paste', ['--type', 'image/jpeg']],
     ['xclip', ['-selection', 'clipboard', '-t', 'image/png', '-o']],
+    ['xclip', ['-selection', 'clipboard', '-t', 'image/jpeg', '-o']],
   ];
   for (const [command, args] of commands) {
     try {
-      const { stdout } = await execFileAsync(command, args, { encoding: 'buffer', maxBuffer: 8 * 1024 * 1024 });
+      const { stdout } = await execFileAsync(command, args, {
+        encoding: 'buffer',
+        maxBuffer: 8 * 1024 * 1024,
+      });
       if (stdout?.length) return stdout;
     } catch {
       // Try the next clipboard tool.
@@ -72,7 +87,11 @@ async function readWindowsClipboard() {
     Write-Output $path
   `;
   try {
-    const { stdout } = await execFileAsync('powershell', ['-NoProfile', '-Command', script]);
+    const { stdout } = await execFileAsync('powershell', [
+      '-NoProfile',
+      '-Command',
+      script,
+    ]);
     const outPath = String(stdout).trim();
     if (!outPath) return null;
     const { readFile, rm } = await import('node:fs/promises');

package/bin/colors.js

@@ -1,6 +1,6 @@
 // ANSI color helpers shared across the CLI. Keep redirected output machine
 // readable and honor the standard NO_COLOR opt-out.
-const noColor = Object.prototype.hasOwnProperty.call(process.env, 'NO_COLOR');
+const noColor = Object.hasOwn(process.env, 'NO_COLOR');
 const forceColor =
   process.env.FORCE_COLOR !== undefined && process.env.FORCE_COLOR !== '0';